• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 926
  • Last Modified:

Static routing in a Netscreen 208

We have a Netscreen 208 that's currently in a pretty standard configuration.  Our provider initially set us up with a block of 16 IPs, so we have a default route set up on the untrust interface as follows:

set route interface ethernet3 gateway xx.yy.zz.49

There are a number of static NAT's for the other IP's to servers behind the firewall, nothing fancy.

We needed more IP's so our provider gave us a second block a.b.c.d/28, however this one has a different default gateway, xx.yy.zz.62.  What's the correct way to set up the routing now that we have two gateways on the same network that we need to deal with?  Is it just a matter of ths?

set route a.b.c.d/28 interface ethernet3 gateway xx.yy.zz.62

Or do we need to set up a seperate interface for this new netblock?
1 Solution
well, being you have a 208, you have plenty of ports to use...
I would just use a second nic on the 208 assign it an ip in that new range, and assign it a route.
ie dual untrust.
With 208, agree with Jim.

I would use another port on the 208 and assign it to the new range and assign it the new default-gateway route.  So I also agree with jabiii and Rajesh.

David   (aka:Pentrix2)
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Managing Security & Risk at the Speed of Business

Gartner Research VP, Neil McDonald & AlgoSec CTO, Prof. Avishai Wool, discuss the business-driven approach to automated security policy management, its benefits and how to align security policy management with business processes to address today's security challenges.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now